PHP CGI ARGUMENT INJECTION using Metasploit

PHP CGI ARGUMENT INJECTION using Metasploit

November 11, 2016   backbox, backtrack, best hacking tools, best hacking tutorials, best rat, ethical hacking book, firefox addon exploit, freelancer programmers, hackers, hackforum, how to identify hash type,

Hello Everyone,

Today i would like to demonstrate How we can do PHP CGI ARGUMENT INJECTION using Metasploit.

REFERENCES

So, If have you Don't know about metasploit then check my then tutorials:-

     ==>Metasploit Playlists<==

So, If you already know about Metasploit then lets start.

The module that we are going to use is :-exploit/multi/http/php_cgi_arg_injection

About this vulnerablity-by Rapid7

So they say-"When run as a CGI, PHP up to version 5.3.12 and 5.4.2 is vulnerable to an argument injection vulnerability. This module takes advantage of the -d flag to set php.ini directives to achieve code execution. From the advisory: "if there is NO unescaped '=' in the query string, the string is split on '+' (encoded space) characters, urldecoded, passed to a function that escapes shell metacharacters (the "encoded in a system-defined manner" from the RFC) and then passes them to the CGI binary.""

This means that if we try to pass/add some parameter we can run some arbitrary code using it. 

So lets try to exploit it.

We are going to use Metasploitable 2.

1. Open Metasploit console.

2. Then just select php_cgi_arg_injection module.

Code:

msf> use exploit/multi/http/php_cgi_arg_injection 

3. Now just set the options and exploit.

Quote:

msf exploit(php_cgi_arg_injection) > set RHOST 172.16.18.134

RHOST => 172.16.18.134

msf exploit(php_cgi_arg_injection) > exploit

And done we got a meterpreter session.

Done :D we got meterpreter session


If you will like this,

Continue Reading

CTF Challenge solution-by Spirited wolf

CTF Challenge solution-by Spirited wolf

June 21, 2016   all software license key, Anonymous, arp, backbox, backtrack, best hacking tutorials, Broken Authentication and Session Management Flaws, ctf challenge, darkcomet tutorial, hackers, spoffing,

CTF Challenge solution-by Spirited wolf

So, hello guys

today i'm gonna show you the solution my my CTF-Challenge

------------------------------

#################Tutorial#################

-------------------------------

link::https://github.com/spiritedwolf/CTF-challenge

----------------------------------------------------------------------------------------------------------

This tutorial is for education purpose only. I'll not be responsible for any harm.

------------------------------------------------------------------------------------------------------------

Please Subscribe My Channel If you like it::

www.youtube.com/c/Pentestingwithspirit

Please Like My Facebook Page::

www.facebook.com/Pentestingwithspirit

Follow me on Twitter::

@spirit3113

  

Continue Reading